µBlock, a lean and fast blocker

Discussion in 'other software & services' started by gorhill, Jun 23, 2014.

  1. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,075
    1.4.4 had more changes under the hood as a single limit for a special loop. just another trolling attempt. gorhill stalled the dev but is willing to fix urgent bugs. a real world developer! Head up!
     
  2. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    3,285
  3. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    3,285
    well said, brumm. :thumb:
     
  4. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,075
    i use 1.4.3 beta/dev and ofc 1.4.4 (several profiles) and i made a comparison what he changed because there exist some changes suggested from members (github) and he included some of them, and an early bugfix for the loop (which ran fine with a transfered code until gorhill released his results i use).

    someone mentioned also some differences here between 1.4.3 and 1.4.4, one of it was cloaked domains which seem not usable in the 1.4.4 but in 1.4.3.

    the 1.4.3 is part of the beta/dev tree while the 1.4.4 follows 1.4.0/1.4.2.

    at least he made it again and uMatrix is definitely not dead.

    this guy is annoying. dont know which drugs he is consuming, but it is not good for him.

    edit:typo
     
    Last edited: Oct 17, 2021
  5. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    2,211
    Location:
    Italy
    The PUP list is useless:

    Immagine.jpg
     
  6. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    9,278
    Location:
    Among the gum trees
    I've added both of these lists to uBO in all browsers and OSes:
    Code:
    https://curben.gitlab.io/malware-filter/phishing-filter.txt
    
    https://curben.gitlab.io/malware-filter/urlhaus-filter.txt
    Thanks to @nicolaasjan for posting them earlier in this thread. :thumb:
     
  7. plat1098

    plat1098 Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    1,213
    Location:
    Brooklyn, NY
    Hmmm, Spam404 ended up in my Imports somehow--after updating uBO in Edge. No big deal, it's not active any more in favor of the new Phishing URL list. I guess I'll make SPAM404 go away now, into the sunset. Nice to have had it while it was current. :thumb:
    spam404.png

    Yes, I don't have the PUP Domains one enabled either. Remains to be proven it's worthwhile. Right now I have around 127,000 filters in place for Firefox, a little less for Edge and it's a work in progress. But all my regular sites are working fine at the moment.
     
  8. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    9,278
    Location:
    Among the gum trees
    The Phishing list has automatically been added now so my Custom was removed and the Spam 404 list likewise got moved to Custom = deleted.
     
  9. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,075
    "urlhaus"
    does it make sense to have not existing file downloads on that list?
    Code:
    zipshare.com/filedownload/eyj...
     
  10. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    330
    Location:
    The Netherlands
    The part after /filedownload/ is a Base64 encoded string, which translates to:
    Code:
    {"archiveId":"6a4d2e8a-84fd-453c-a253-ec4c807e2c04","email":"hoangngoncson.ppmc@gmail.com"}
    [Edit]
    There are more of these here. Another one translated to:
    Code:
    {"archiveId":"12874fa6-ef37-44db-bef5-4ea7cd7c2bc7","email":"vattubaobingocdiep@gmail.com"}
    [Edit2]
    Tried a few others and the different Gmail addresses were all found on Vietnamese pages...
     
    Last edited: Oct 17, 2021
  11. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,075
    i specify some more: why should a filter list care about (suspicious) downloads where used antivirus should alert those?

    the first of that list was not available, guess that others may down too.
     
  12. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    330
    Location:
    The Netherlands
    Maybe because the antivirus definitions don't yet recognize it if it's a new sample?
    And antivirus products are not a magical solution to every threat. That's why several lines of defence are always a good idea.
    The list is updated twice a day, so maybe tomorrow it will be no longer on it. :)

    B.t.w, did you actually try to download such a sample? :eek:

    [Edit]
    On the most recent list (Updated: Sun, 17 Oct 2021 12:10:29) there is only one zipshare.com/filedownload/ link and that one indeed gives 404:

    Code:
    wget zipshare.com/filedownload/eyjhcmnoaxzlswqioii2ytrkmmu4ys04ngzkltq1m2mtyti1my1lyzrjoda3ztjjmdqilcjlbwfpbci6imhvyw5nbmdvbmnzb24uchbty0bnbwfpbc5jb20ifq==
    --2021-10-17 19:32:22--  http://zipshare.com/filedownload/eyjhcmnoaxzlswqioii2ytrkmmu4ys04ngzkltq1m2mtyti1my1lyzrjoda3ztjjmdqilcjlbwfpbci6imhvyw5nbmdvbmnzb24uchbty0bnbwfpbc5jb20ifq==
    Herleiden van zipshare.com (zipshare.com)... 18.224.209.112, 3.137.127.2
    Verbinding maken met zipshare.com (zipshare.com)|18.224.209.112|:80... verbonden.
    HTTP-verzoek is verzonden; wachten op antwoord... 301 Moved Permanently
    Locatie: https://zipshare.com:443/filedownload/eyjhcmnoaxzlswqioii2ytrkmmu4ys04ngzkltq1m2mtyti1my1lyzrjoda3ztjjmdqilcjlbwfpbci6imhvyw5nbmdvbmnzb24uchbty0bnbwfpbc5jb20ifq== [volgen...]
    --2021-10-17 19:32:22--  https://zipshare.com/filedownload/eyjhcmnoaxzlswqioii2ytrkmmu4ys04ngzkltq1m2mtyti1my1lyzrjoda3ztjjmdqilcjlbwfpbci6imhvyw5nbmdvbmnzb24uchbty0bnbwfpbc5jb20ifq==
    Verbinding maken met zipshare.com (zipshare.com)|18.224.209.112|:443... verbonden.
    HTTP-verzoek is verzonden; wachten op antwoord... 404 Not Found
    2021-10-17 19:32:23 Fout 404: Not Found.
    
     
    Last edited: Oct 17, 2021
  13. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,075
    That may be. But suspicious files on a free file host? You know what it could be? filter list should not care for this.
     
  14. Floyd 57

    Floyd 57 Registered Member

    Joined:
    Mar 17, 2017
    Posts:
    1,234
    Location:
    Europe
    On 1.38.6 here. I still have the spam404 list and no new phishing list

    upload_2021-10-17_21-11-40.png
     
  15. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,062
    Location:
    .
    Did you try: Purge all caches -> Update now -> restart browser
     
  16. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    892
    Location:
    The Netherlands
    Was going to post the same, but @bjm_ was faster :thumb:
    That is the solution.
     
  17. Floyd 57

    Floyd 57 Registered Member

    Joined:
    Mar 17, 2017
    Posts:
    1,234
    Location:
    Europe
    Well that fixed it, but it shouldn't have been needed. It actually makes no sense whatsoever.
     
  18. plat1098

    plat1098 Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    1,213
    Location:
    Brooklyn, NY
    Yes I think so, too. It's still nice to have the option if you ever change your ways. These weren't enabled by default anyway, not on here at least. Talking about the Malware and Phishing lists. The PUP one, hmmm, not interested.
     
  19. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,062
    Location:
    .
  20. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    330
    Location:
    The Netherlands
    We are careful with these, but a lot of people just click on links in their webmail without thinking. ;)
     
  21. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,075
    in such cases, without security layer - sorry, no mercy. users, who click such links, dont know about such filter list(s). there exist no scenario where exist both.
     
  22. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    3,285
    can't say you're wrong.
     
  23. Floyd 57

    Floyd 57 Registered Member

    Joined:
    Mar 17, 2017
    Posts:
    1,234
    Location:
    Europe
  24. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,062
    Location:
    .
    Okay. I'll run Purge all caches + Update now...when uBO changes filter lists or when I change filter lists. Sometimes, I'll run Purge all caches + Update now...just to feel refreshed. Just me.
    I don't know what should/not happen by default. Just saying.
    Note: my Auto-update filter lists = disabled. Just me.
    Regards w Respect
     
    Last edited: Oct 18, 2021
  25. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    330
    Location:
    The Netherlands
    One scenario:
    Someone tech savvy installed uBo for them. :)
    I've done that in many cases, when I had to clean up PC's.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.